Impersonation Trends Report 2026 — what's actually happening on social media

Findings from the GACS public scam database, the verified-handle registry, and the social-scan corpus — covering all impersonation reports processed across X, TikTok, Instagram, YouTube, and Telegram.

What's in this report: six qualitative findings on where impersonation is heading in 2026, why, and what creators and platforms are doing that actually moves the needle.

For aggregated quantitative breakdowns (platform, country, creator category) journalists can request data via /press-kit.

1. X remains the top impersonation surface

After the 2023 transition to paid verification, the cost barrier to creating a 'verified-looking' impersonator dropped to $8/month. Reports of X impersonation in the GACS database grew 188% YoY between 2024 and 2025 and continue to dominate platform-level submissions in 2026.

2. Crypto-influencer clones are still the highest-value target

Accounts impersonating crypto founders, exchange-support handles, and analyst influencers account for the majority of confirmed reports where the victim disclosed a financial loss. The median reported loss in this category is significantly higher than in any other impersonator category in our dataset.

3. Recovery-scam impersonators have professionalised

Following the publication of national-press coverage of recovery scams in 2024 and 2025, scammers shifted from one-off DMs to coordinated impersonation of named recovery firms, law-enforcement liaisons, and even past investigative journalists. The 'recovery' impersonator is now the second-fastest-growing subcategory in our dataset.

4. AI-cloned profile pictures are mainstream

Reverse-image lookups against confirmed impersonator reports show that the share of profile pictures generated by diffusion models (rather than scraped from the real owner) crossed 50% during 2025 and has continued to climb. The implication for defenders is that pixel-hash matching against the real owner's photo no longer catches the majority of clones — verification has to consider account-level signals.

5. TikTok and Instagram are the fastest-growing

Year-on-year growth of impersonation reports on TikTok and Instagram outpaces X in percentage terms, even though absolute volumes are lower. Both platforms still moderate the blue tick, but creators in the parenting, finance, and wellness niches report the steepest increase in clone activity.

6. Defence: pinned-post verification works

Among creators in the GACS verified-handle registry who maintain an up-to-date pinned 'how to verify me' post, follower-side scam reports drop measurably in the 90 days after pinning. The Creator Safety Toolkit standardises this approach.

What this means for you

• Creators: claim your handle, pin a verification post, and add yourself to the watchlist — see /creator-safety-toolkit.
• Brands: run weekly scanner sweeps of your handle and your top 10 customer-support topics; bulk-report impostors.
• Individuals: learn the 30-second verification routine and never trust the blue check alone — see /verify-any-social-account.
• Journalists: request raw counts and breakdowns via /press-kit.